Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa
File: a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa (raw, json)
Hash identifier: +3gAMS3qMR6wFaxyocNyFv8vr+17PcT/+NMnpst7GPw=
Subject key identifier: 3A:AD:8D:80:DE:A2:CC:BC:F9:25:E2:FC:E3:CB:06:DC:65:B6:74:E1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1108B91588B124087FB680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:08:b9:15:88:b1:24:08:7f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=97fd667b-e1a7-403b-ba7b-2c59937d268c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:2f:16:73:d0:2f:7c:b2:4b:b5:d4:b9:87:
b3:83:70:22:b9:96:34:af:c1:44:fd:20:fe:1e:40:
b7:82:4a:b3:a6:a1:26:54:7e:01:0b:a8:db:0b:c4:
b7:c3:30:9e:10:9d:54:01:c2:ed:34:c2:f1:ce:b5:
07:11:23:15:2f:ad:4f:94:dd:79:2c:63:56:eb:65:
44:13:87:52:a3:4d:b5:b1:99:a7:0c:56:9d:be:c9:
15:78:3c:73:aa:22:c8:e2:4c:6e:37:d3:50:4b:b0:
b5:d2:13:27:8d:c1:72:7c:64:d9:8a:36:5f:c5:d8:
5f:e2:42:76:61:d1:0b:43:8c:2a:14:bf:90:e2:94:
2a:47:84:80:6b:c6:5d:e3:da:f1:a4:6c:30:73:7f:
97:b6:0e:38:6c:0f:b8:f0:9a:bf:62:af:d3:34:a7:
cb:6c:00:84:7f:02:94:84:67:a4:d0:1b:5c:a0:01:
00:2d:d6:f4:e7:f1:ad:ae:81:a9:c9:e9:ee:1c:86:
07:b7:52:6a:2b:a2:e2:f2:02:09:1b:8a:37:8a:47:
4a:cf:b5:99:f4:1d:e6:5d:e7:04:7a:55:47:30:61:
77:00:87:35:20:fd:2e:ee:d0:28:f7:2f:f8:b9:10:
c3:b9:18:08:b3:8a:fc:ba:34:08:a3:51:dd:39:3b:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:8D:80:DE:A2:CC:BC:F9:25:E2:FC:E3:CB:06:DC:65:B6:74:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ff:4a:59:b7:9f:a2:b3:a5:84:10:cf:44:17:4c:e1:fd:f9:
1d:3c:20:3b:04:83:a1:db:50:65:1b:85:a8:7a:9c:cc:a6:1d:
c0:a4:ac:18:80:78:1c:2e:03:32:39:46:af:fd:c0:aa:2c:d8:
a6:bb:c9:f4:da:c9:4a:32:9b:20:f9:39:b2:08:3d:0d:cf:09:
08:98:e3:15:b3:6f:ec:55:eb:61:73:41:12:fd:b1:8f:07:59:
18:9f:aa:93:1b:7b:b8:61:06:f0:21:89:07:18:c1:a3:02:f2:
a0:3b:e9:c7:82:5e:3c:43:0c:f1:39:13:2a:95:d7:8d:b6:8f:
0b:8f:91:90:88:39:d0:b4:04:63:c9:19:1e:ce:d5:fb:98:ad:
09:92:a4:74:c0:d4:e3:ac:05:cf:8c:85:49:d6:9d:d8:0a:45:
ae:5b:04:a0:ff:93:9f:6d:0f:35:65:e9:99:9c:d8:ed:a7:80:
19:fb:9d:52:c1:f9:4b:99:f4:6d:b8:9a:17:1f:a2:72:37:8d:
3d:c2:1e:d5:4e:5f:75:6d:d2:2a:56:9b:35:01:5f:0a:dc:5c:
c6:34:6d:ef:4a:98:ea:9f:b0:d6:bd:bb:fe:55:ee:92:7b:4d:
00:c7:a2:09:2e:a0:5a:cc:c3:ff:4f:bf:38:c5:6e:b8:fb:31:
05:3a:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:10 2025 by rpki-client